Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: 33eOBHp0fpjWfFlqHNiEKbTZHcrZtNMOLUfpyBGPW6w=
Subject key identifier: 25:0C:D2:E0:CB:FB:26:C7:05:29:61:05:00:D4:F9:55:CB:4C:67:8E
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0199FCFD40FA471B236A24939C9DEE7F3AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 067C
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: 3Jr1ROaVTvZY9+aNylQmiXvpQf0VW/5+c5a13yYB5h4=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:40:fa:47:1b:23:6a:24:93:9c:9d:ee:7f:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=250cd2e0cbfb26c70529610500d4f955cb4c678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:ed:52:fc:18:26:16:4a:ef:4f:f1:29:67:
18:07:95:40:c6:8b:e2:a1:ef:31:03:2a:f3:e0:a1:
d3:ec:92:5b:ac:af:36:eb:dd:6a:93:90:3b:ba:b0:
f9:e2:b7:69:6b:a9:ed:0d:67:80:09:a7:89:5a:d1:
ae:c8:a9:82:f9:9b:75:8e:f4:2a:d5:68:64:e3:05:
55:aa:6c:08:8f:ee:8e:83:50:31:32:e7:9d:25:eb:
21:13:ee:ba:af:d6:b2:21:65:1c:fb:71:e7:92:0c:
00:3a:20:45:fe:c5:c2:fe:24:ea:f6:8f:bb:cc:55:
50:27:cc:2c:31:dc:5f:1c:15:6e:6a:1e:ba:4c:6a:
6a:49:c6:bb:cf:06:0e:4c:cd:19:b9:15:04:8e:0d:
9b:77:6b:3b:ff:61:f9:4b:01:ff:99:e7:74:bc:0d:
56:68:9c:7a:89:9c:44:02:87:07:05:36:89:8b:7e:
56:ce:09:dd:c1:10:85:2b:26:6f:50:de:70:ce:e7:
8d:de:d5:25:80:17:07:d1:7b:be:a9:bc:c4:74:24:
7c:11:4a:a9:c6:19:36:d1:d2:95:a8:63:9d:f2:1d:
57:d3:1c:28:77:0c:68:d4:fe:b4:3a:26:e3:b6:2d:
d0:cc:9c:27:91:04:b2:fa:53:ba:39:2f:5a:ca:03:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:D2:E0:CB:FB:26:C7:05:29:61:05:00:D4:F9:55:CB:4C:67:8E
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:d4:25:d9:3e:27:e9:f2:8c:7e:ed:64:ea:f6:22:ec:65:
8b:12:22:31:24:80:ed:2f:5e:06:16:88:a3:c8:0c:6d:7b:bb:
4e:5e:8b:8f:f9:18:94:70:b7:88:3c:4c:08:96:55:ec:9a:42:
b8:c5:0a:6d:17:04:4b:a1:14:ea:a6:10:26:69:cb:48:09:b6:
80:bd:2d:01:91:08:cd:58:64:e7:47:96:55:43:39:3f:dd:93:
31:6e:19:dd:78:49:f2:9f:4b:6a:03:0b:52:61:57:0a:82:79:
5e:1a:d8:de:82:0d:47:db:8a:34:56:77:6b:71:e1:15:ea:14:
bf:73:6b:b1:0c:22:03:40:8c:e1:49:7f:45:3b:03:d5:47:b5:
21:9d:6f:ce:c1:d9:f5:c8:57:b3:85:b8:64:ff:1d:4a:24:c9:
84:10:ae:cc:d5:e6:52:7e:fe:e3:1f:27:6f:48:4c:ff:dd:e4:
1f:e3:6a:15:81:62:36:1f:8b:df:bc:13:d1:1b:0e:ae:be:dc:
97:6b:d3:40:45:b5:65:23:24:6d:e4:79:92:8a:23:3c:b3:64:
b3:20:fb:80:57:3f:bf:6f:d6:e8:be:d0:16:0b:28:26:99:97:
57:40:94:61:ea:94:df:48:e6:6d:b9:ae:c4:38:24:e8:a5:c6:
00:89:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:11 2025 by rpki-client